{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T10:59:38Z","timestamp":1785668378148,"version":"3.56.0"},"reference-count":112,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T00:00:00Z","timestamp":1611014400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T00:00:00Z","timestamp":1611014400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2021,12]]},"DOI":"10.1007\/s10207-020-00535-2","type":"journal-article","created":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T10:03:50Z","timestamp":1611050630000},"page":"849-869","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["Continuous improvement process (CIP)-based privacy-preserving framework for smart connected toys"],"prefix":"10.1007","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3306-3748","authenticated-orcid":false,"given":"Benjamin","family":"Yankson","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,1,19]]},"reference":[{"key":"535_CR1","unstructured":"Madden, M., Henhart, A., Cortesi, S., Gasser, U., Duggan, M., Smith, A.: Teens, Social Media, and Privacy, Pewresearch.org, (2013). https:\/\/www.pewresearch.org\/wp-content\/uploads\/sites\/9\/2013\/05\/PIP_TeensSocialMediaandPrivacy_PDF.pdf. Accessed 11 Jun 2019"},{"key":"535_CR2","unstructured":"Shop, F.T.: Forgotten Toy Shop\u2014History of toys and games. https:\/\/www.theforgottentoyshop.co.uk\/pages\/history-of-toys-game. Accessed 30 Jul 2019"},{"issue":"7\u20138","key":"535_CR3","doi-asserted-by":"publisher","first-page":"375","DOI":"10.1007\/s11199-012-0177-8","volume":"67","author":"CJ Auster","year":"2012","unstructured":"Auster, C.J., Mansbach, C.S.: The gender marketing of toys: an analysis of color and type of toys on the Disney store website. Sex Roles 67(7\u20138), 375\u2013388 (2012)","journal-title":"Sex Roles"},{"issue":"9\u201310","key":"535_CR4","doi-asserted-by":"publisher","first-page":"619","DOI":"10.1007\/s11199-005-7729-0","volume":"53","author":"JEO Blakemore","year":"2005","unstructured":"Blakemore, J.E.O., Centers, R.E.: Characteristics of Boys\u2019 and Girls\u2019 toys. Sex Roles 53(9\u201310), 619\u2013630 (2005)","journal-title":"Sex Roles"},{"key":"535_CR5","first-page":"149","volume-title":"Privacy Preservation Framework for Smart Connected Toys. Computing in Smart Toys","author":"B Yankson","year":"2017","unstructured":"Yankson, B., Iqbal, F., Hung, P.C.K.: Privacy Preservation Framework for Smart Connected Toys. Computing in Smart Toys, pp. 149\u2013164. Springer, Berlin (2017)"},{"issue":"6","key":"535_CR6","first-page":"55","volume":"1\u20133","author":"GU Anikweze","year":"2014","unstructured":"Anikweze, G.U.: The relevance of fabric toys in childhood. Am. Int. J. Res. Human. Art Soc. Sci. 1\u20133(6), 55\u201362 (2014)","journal-title":"Am. Int. J. Res. Human. Art Soc. Sci."},{"key":"535_CR7","unstructured":"Smith, R.: family online safety institute-connected toys and privacy: what good digital parents should know. https:\/\/www.fosi.org\/good-digital-parenting\/connected-toys-and-privacy-what-parents-should\/-know. Accessed 30 Jul 2019"},{"key":"535_CR8","unstructured":"Toy Industry Association.: Toy Trends. (2019). http:\/\/www.toyassociation.org\/ta\/research\/reports\/trends\/toys\/research-and-data\/reports\/trend-spotting.aspx. Accessed 6 May 2019"},{"key":"535_CR9","unstructured":"LaMonica, M.: Mobile apps reshape toys and learning. (2012). http:\/\/www.cnet.com\/news\/mobile-apps-reshape-toys-and-learning\/. Accessed 30 Jul 2019"},{"issue":"1","key":"535_CR10","first-page":"28","volume":"16","author":"NC Kara","year":"2013","unstructured":"Kara, N.C.: Investigating the activities of children toward a smart storytelling toy. J. Educ. Technol. Soc. 16(1), 28\u201343 (2013)","journal-title":"J. Educ. Technol. Soc."},{"key":"535_CR11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-21323-1_2","volume-title":"Toy Computing Background: Mobile Services for Toy Computing","author":"L Rafferty","year":"2015","unstructured":"Rafferty, L.: Toy Computing Background: Mobile Services for Toy Computing. Springer International Publishing, Berlin (2015)"},{"key":"535_CR12","unstructured":"Mahmoud, M.: An Experimental Evaluation of Smart Toys Security and Privacy practices, Masters Thesis, Concordia Institute for Information Engineering, Concordia University, Montreal, Canada, (2018)"},{"key":"535_CR13","unstructured":"Hung, P.C.K.: Children privacy protection engine for smart anthropomorphic toys proposal. (2015)"},{"key":"535_CR14","unstructured":"Smart2Zero.: Google patents connected smart toys that listen, speak, Smart2.0. (2019). https:\/\/www.smart2zero.com\/news\/google-patents-connected-smart-toys-listen-speak. Accessed 19 May 2019"},{"key":"535_CR15","unstructured":"NIST.: Guide for security-focused configuration management of information systems. http:\/\/nvlpubs.nist.gov\/nistpubs\/Legacy\/SP\/nistspecialpublication800-128.pdf. Accessed 30 Jul 2019"},{"key":"535_CR16","unstructured":"FTC.: Protecting children\u2019s privacy under COPPA: a survey on compliance. https:\/\/www.ftc.gov\/sites\/default\/files\/documents\/rules\/children%E2%80%99s-online-privacy-protection-rule-coppa\/coppasurvey.pdf. [Accessed: 30-Jul-2019]"},{"key":"535_CR17","unstructured":"PIPEDA.: The personal information protection and electronic documents act (PIPEDA). https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-\/electronic-documents-act-pipeda\/. Accessed 30 Jul 2019"},{"key":"535_CR18","unstructured":"COPPA.: COPPA-Children\u2019s online privacy protection act. http:\/\/www.coppa.org\/coppa.htm. Accessed 30 Jul 2019"},{"key":"535_CR19","unstructured":"Federal Trade Commission.: Children\u2019s online privacy protection rule: a six-step compliance plan for your business. https:\/\/www.ftc.gov\/tips-advice\/business-center\/guidance\/childrens-online-privacy-protection-rule-six\/-step-compliance. Accessed 30 Jul 2019"},{"key":"535_CR20","unstructured":"Hung, P.C.K., Fantinato, M., Rafferty, L.: A study of privacy requirements for smart toys. In: The 20th Pacific Asia Conference on Information Systems (PACIS 2016), Chiayi, Taiwan, (June 27\u2013July 1, 2016)"},{"key":"535_CR21","doi-asserted-by":"crossref","unstructured":"McReynolds, E.H.S.: Toys that listen: a study of parents, children, and internet-connected toys. In: CHI, (2017)","DOI":"10.1145\/3025453.3025735"},{"key":"535_CR22","unstructured":"Allclearid.: Child identity theft report 2012: what to know. https:\/\/www.allclearid.com\/personal\/2012\/05\/child-id-theft-report-2012\/. Accessed 30 Jul 2019"},{"issue":"3","key":"535_CR23","doi-asserted-by":"publisher","first-page":"86","DOI":"10.1109\/MIC.2007.54","volume":"11","author":"DJ Weitzner","year":"2007","unstructured":"Weitzner, D.J.: Free speech and child protection on the web. IEEE Internet Comput. 11(3), 86\u201389 (2007)","journal-title":"IEEE Internet Comput."},{"key":"535_CR24","doi-asserted-by":"crossref","unstructured":"Rafferty, L., L., Hung, P.C.K., Fantinato, M., Peres, S.M., Iqbal, F., Kuo, S.Y., Huang, S.C.: Towards a privacy rule conceptual model for smart toys. In: Computing in Smart Toys, p. 85, (2017)","DOI":"10.1007\/978-3-319-62072-5_6"},{"key":"535_CR25","unstructured":"Department Of Justice.: Sex Offender registry. https:\/\/www.nsopw.gov\/en\/Registry. Accessed 30 Jul 2019"},{"key":"535_CR26","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1007\/978-0-85729-006-9","volume-title":"Privacy and Trust, Elements of Computer Security, Undergraduate Topics in Computer Science","author":"D Salomon","year":"2010","unstructured":"Salomon, D.: Privacy and Trust, Elements of Computer Security, Undergraduate Topics in Computer Science, pp. 273\u2013290. Springer, Berlin (2010)"},{"key":"535_CR27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-21323-1","volume-title":"Mobile Services for Toy Computing, The Springer International Series on Applications and Trends in Computer Science","author":"PCK Hung","year":"2015","unstructured":"Hung, P.C.K.: Mobile Services for Toy Computing, The Springer International Series on Applications and Trends in Computer Science. Springer International Publishing, Berlin (2015)"},{"issue":"9","key":"535_CR28","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/sym10090387","volume":"10","author":"JL Espinosa-Aranda","year":"2018","unstructured":"Espinosa-Aranda, J.L., Vallez, N., Rico-Saavedra, J.M., Parra-Patino, J., Bueno, G., Sorci, M., Moloney, D., Pena, D., Deniz, O.: Smart doll: emotion recognition using embedded deep learning. Symmetry 10(9), 1\u201318 (2018)","journal-title":"Symmetry"},{"key":"535_CR29","unstructured":"Toy Industry Association Inc.: Economic Impact of the Toy Industry 2018 Summary Report. (2018). https:\/\/www.toyassociation.org\/ta\/research\/data\/impact\/toys\/research-and-data\/data\/economic-impact-data.aspx. Accessed 30 Jul 2019"},{"key":"535_CR30","unstructured":"WeLiveSecurity.: 5 of the most devastating data breaches of 2015. (2016). https:\/\/www.welivesecurity.com\/2016\/01\/07\/5-devastating-data-breaches-2015\/. Accessed 30 Jul 2019"},{"key":"535_CR31","unstructured":"Mihalcik, C.: Hack of toy maker VTech exposes 5 million customers. (2015). https:\/\/www.cnet.com\/au\/news\/hack-of-toy-maker-vtech-exposes-families\/. Accessed 30 Jul 2019"},{"issue":"4","key":"535_CR32","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1145\/572199.572203","volume":"29","author":"H Tavani","year":"1999","unstructured":"Tavani, H.: Privacy online. SIGCAS Comput. Soc. 29(4), 11\u201319 (1999). https:\/\/doi.org\/10.1145\/572199.572203","journal-title":"SIGCAS Comput. Soc."},{"key":"535_CR33","doi-asserted-by":"crossref","unstructured":"Rafferty, L., Hung, P.C.K., Fantinato, M., Peres, S.M., Iqbal, F., Kuo, S.Y., Huang, S.C.: Towards a privacy rule model for smart toy. In: the IEEE 50th Hawaii International Conference on System Sciences (HICSS-50), Big Island, Hawaii, USA, January 4\u20137, (2017)","DOI":"10.24251\/HICSS.2017.146"},{"key":"535_CR34","doi-asserted-by":"crossref","unstructured":"Felt, A., Ha, E., Egelman, S., Haney, A., Chin, E., Wagner, D.: Android permissions: user attention, comprehension, and behavior. In: The 8th symposium on usable privacy and security, p. 14 (2012)","DOI":"10.1145\/2335356.2335360"},{"key":"535_CR35","doi-asserted-by":"crossref","unstructured":"Yankson, B., Iqbal, F., Lu, Z., Wang, X., Hung, P.C.K., P.: Modelling privacy preservation in smart connected toys by Petri-Nets. In: Proceedings of the 52nd Hawaii International Conference on System Sciences, pp. 1696-1705, (January 8\u201312, 2019)","DOI":"10.24251\/HICSS.2019.207"},{"key":"535_CR36","unstructured":"Federal Trade Commission.: Child identity theft. (2012). https:\/\/www.consumer.ftc.gov\/articles\/0040-child-identity-theft. Accessed 30 Jul 2019"},{"key":"535_CR37","unstructured":"Federal Trade Commission.: Prepared statement of federal trade commission on protecting the privacy of the social security number from identity theft. http:\/\/www.ftc.gov\/sites\/default\/files\/documents\/public_statements\/prepared-statement-federal-trade-commission\/-protecting-privacy-social-security-number-\/identity-theft\/p065409socsectest.pdf\/. Accessed 30 Jul 2019"},{"key":"535_CR38","unstructured":"ID Analytics.: New Study from ID analytics finds when children\u2019s data is exposed, it is misused more frequently. http:\/\/www.idanalytics.com\/press-release\/140000-children-victims-identity-fraud-year\/. Accessed 30 Jul 2019"},{"key":"535_CR39","unstructured":"Carnegie Mellon CyLab.: Child identity theft. https:\/\/www.cylab.cmu.edu\/files\/pdfs\/reports\/2011\/child-identity-theft.pdf. Accessed 30 Jul 2019"},{"key":"535_CR40","doi-asserted-by":"publisher","first-page":"2136","DOI":"10.1007\/978-0-387-39940-9_274","volume-title":"Privacy, Encyclopedia of Database Systems","author":"PCK Hung","year":"2009","unstructured":"Hung, P.C.K., Cheng, V.S.Y.: Privacy, Encyclopedia of Database Systems, pp. 2136\u20132137. Springer, Berlin (2009)"},{"key":"535_CR41","unstructured":"Kosa, T.: Towards Measuring Privacy, Ph. D. dissertation, Faculty of Science, Ontario Tech University, Oshawa, Canada, (2015)"},{"key":"535_CR42","volume-title":"Risks and Safety on the Internet: The Perspective of European Children, Full findings and policy implications from the EU Kids Online survey of 9\u201316 year old and their parents in 25 countries","author":"S Livingstone","year":"2011","unstructured":"Livingstone, S., Haddon, L., Gorzig, A., Olafsson, K.: Risks and Safety on the Internet: The Perspective of European Children, Full findings and policy implications from the EU Kids Online survey of 9\u201316 year old and their parents in 25 countries. London School of Economics and Political Science, London (2011)"},{"key":"535_CR43","doi-asserted-by":"crossref","unstructured":"Fantinato, M., Albuquerque, O., De Albuquerque, A., Kelner, J., Yankson, B.: A literature survey on smart toy-related children\u2019s privacy risks, Hdl.handle.net. (2020). http:\/\/hdl.handle.net\/10125\/63921. Accessed 28 Feb 2020","DOI":"10.24251\/HICSS.2020.182"},{"key":"535_CR44","doi-asserted-by":"crossref","unstructured":"Yankson, B., Iqbal, F., Aleem, S., Shah, B., Hung, P.C.K., de Albuquerque, A.P.: a privacy-preserving context ontology (PPCO) for smart connected toys. In: 12th CMI Conference on Cybersecurity and Privacy (CMI), Copenhagen, Denmark, pp. 1\u20136 (2019)","DOI":"10.1109\/CMI48017.2019.8962141"},{"key":"535_CR45","unstructured":"MacAfee.: McAfee Labs 2017 Threats predictions. (2016) https:\/\/www.mcafee.com\/ca\/resources\/reports\/rp-threats-predictions-2017.pdf. Accessed 30 Jul 2019"},{"key":"535_CR46","volume-title":"Principles of Information Security (4th edn). Chapter 1","author":"ME Whitman","year":"2011","unstructured":"Whitman, M.E., Mattord, H.J.: Principles of Information Security (4th edn). Chapter 1. Course Technology Press, Boston (2011)"},{"key":"535_CR47","doi-asserted-by":"crossref","unstructured":"Lin, P., Yankson, B., Lu, Z., Hung, P.C.K.: Children privacy identification system in LINE Chatbot for smart toys. In: 2019 IEEE 12th International Conference on Cloud Computing (Cloud), Milan, Italy, pp. 86\u201390 (2019)","DOI":"10.1109\/CLOUD.2019.00026"},{"issue":"1","key":"535_CR48","doi-asserted-by":"publisher","first-page":"978","DOI":"10.1109\/JIOT.2018.2866423","volume":"6","author":"G Chu","year":"2019","unstructured":"Chu, G., Apthorpe, N., Feamster, N.: Security and privacy analyses of internet of things children\u2019s toys. IEEE Internet of Things J. 6(1), 978\u2013985 (2019)","journal-title":"IEEE Internet of Things J."},{"key":"535_CR49","unstructured":"Nelson, S.: Germany bans \u2019My Friend Cayla\u2019 Doll over spying concerns, NPR . (2017). https:\/\/www.npr.org\/2017\/02\/20\/516292295\/germany-bans-my-friend-cayla-doll-over-\/spying-concerns. Accessed 30 Jul 2019"},{"key":"535_CR50","unstructured":"Crime in Taichung, Numbeo.com. (2019). https:\/\/www.numbeo.com\/crime\/in\/Taichung. Accessed 20 May 2019"},{"issue":"4","key":"535_CR51","doi-asserted-by":"publisher","first-page":"506","DOI":"10.1080\/22041451.2016.1266124","volume":"2","author":"D Holloway","year":"2016","unstructured":"Holloway, D., Green, L.: The Internet of toys. Communication Research and Practice 2(4), 506\u2013519 (2016). https:\/\/doi.org\/10.1080\/22041451.2016.1266124","journal-title":"Communication Research and Practice"},{"key":"535_CR52","unstructured":"PCWorld.: Internet-connected Hello Barbie Doll can be hacked. (2015). http:\/\/www.pcworld.com\/article\/3012220\/security\/internet\/-connected-hello-barbie-doll-can-be-hacked.html. Accessed 30 Jul 2019"},{"key":"535_CR53","unstructured":"Goodin, D.: 9 baby monitors wide open to hacks that expose users\u2019 most private moments. (2015). http:\/\/arstechnica.com\/security\/2015\/09\/9-baby-monitors-wide-open-to-hacks-that-\/expose-users-most-private-moments\/. Accessed 30 Jul 2019"},{"key":"535_CR54","unstructured":"Tierney, A.: Pwning CCTV cameras. (2016). https:\/\/www.pentestpartners.com\/blog\/pwning-cctv-cameras\/. Accessed 30 Jul 2019"},{"key":"535_CR55","unstructured":"Karpow, A., Karpow, M.: Watch and be watched: compromising all smart tv generations. In: IEEE 11th Annual Consumer Communications and Networking Conference (CCNC)-Security Privacy and Content Protection, Las Vegas, NV, USA, (2014)"},{"key":"535_CR56","unstructured":"Rapid7.: Fisher-Price smart toy$$\\textregistered $$ hereO GPS platform vulnerabilities. https:\/\/blog.rapid7.com\/2016\/02\/02\/security-vulnerabilities-within-fisher-price-\/smart-toy-hereo-gps-platform. [Accessed: 30-Jul-2019]"},{"key":"535_CR57","unstructured":"Catalin, C.: Germany bans \u2018My Friend Cayla\u2019 toys over hacking fears and data collection. https:\/\/www.bleepingcomputer.com\/news\/security\/germany-bans-my-friend-cayla-toys-over-hacking\/-fears-and-data-collection\/. Accessed 30 Jul 2019"},{"key":"535_CR58","unstructured":"Gibbs, S.: Hackers can hijack Wi-Fi Hell. (2015). https:\/\/www.theguardian.com\/technology\/2015\/nov\/26\/hackers-can-hijack-wi-fi-hello-barbie-to-spy-on\/-your-childrenoBarbietospyonyourchildren. Accessed 30 Jul 2019"},{"key":"535_CR59","unstructured":"Hunt, T.: Data from connected CloudPets teddy bears leaked and ransomed, exposing kids\u2019 voice messages. https:\/\/www.troyhunt.com\/data-from-connected-cloudpets-teddy-bears-leaked\/-and-ransomed-exposing-kids-voice-messages\/. Accessed 30 Jul 2019"},{"key":"535_CR60","unstructured":"Rapid7, 10 New Vulnerabilities for Several Video Baby Monitors. [Online]. Available:https:\/\/blog.rapid7.com\/2015\/09\/02\/iotsec-disclosure-10-new-vulns-for-several-\/video-baby-monitors\/. [Accessed: 30-Jul-2019]"},{"issue":"9","key":"535_CR61","first-page":"3","volume":"20","author":"SA Riga","year":"2017","unstructured":"Riga, S.A.: Two Breaches, two enforcement actions, and a DDOS attack: data security and the rise of the internet of things. J. Internet Law 20(9), 3\u20137 (2017)","journal-title":"J. Internet Law"},{"key":"535_CR62","unstructured":"Health Canada.: Industry guide to health Canada\u2019s safety requirements for children\u2019s toys and related products. (2012). https:\/\/www.canada.ca\/en\/health-canada\/services\/consumer-product-safety\/reports-publications\/industry-professionals\/industry-guide-safety-requirements-children-\/toys-related-products-summary.html. Accessed 30 Jul 2019"},{"key":"535_CR63","unstructured":"Dobbins, D.L.: Analysis of security concerns and privacy risks of children\u2019s smart toys. (2015). Washington University. https:\/\/sever.wustl.edu\/degreeprograms\/cyber-security-management\/SiteAssets\/Dobbins%20-%20SmartToy_Security_Final%20Revised%209-28-15.pdf. Accessed 30 Jul 2019"},{"key":"535_CR64","unstructured":"OTA.: IoT security and privacy trust framework v2.0. https:\/\/otalliance.org\/system\/files\/files\/initiative\/documents\/iot_trust_framework2.1.pdf . Accessed 30 Jul 2019"},{"key":"535_CR65","doi-asserted-by":"crossref","unstructured":"Jones, M.L., Meurer, K.: Can (and should) Hello Barbie Keep a Secret?, Ethics in engineering, science and technology (ETHICS). In: 2016 IEEE International Symposium on Ethics in Engineering pp. 1\u20136, (2016)","DOI":"10.1109\/ETHICS.2016.7560047"},{"key":"535_CR66","doi-asserted-by":"crossref","unstructured":"Druga, S., Williams, R., Park, H.W., Breazeal, C.: How smart are the smart toys?: Children and parents\u2019 agent interaction and intelligence attribution. In: Proceedings of the 17th ACM Conference on Interaction Design and Children, p. 231, (2018)","DOI":"10.1145\/3202185.3202741"},{"key":"535_CR67","doi-asserted-by":"crossref","unstructured":"McReynolds, E., Hubbard, S., Lau, T., Saraf, A., Cakmak, M., Roesner, F.: Toys that listen: a study of parents, children, and internet-connected toys. In: Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems, p. 519, (2017)","DOI":"10.1145\/3025453.3025735"},{"key":"535_CR68","doi-asserted-by":"crossref","unstructured":"Valente, J., Cardenas, A.: Security and privacy in smart toys. In: Proceedings of the 2017 Workshop on Internet of Things Security and Privacy, p. 19, (2017)","DOI":"10.1145\/3139937.3139947"},{"key":"535_CR69","doi-asserted-by":"crossref","unstructured":"Mahmoud, M., Hossen, M.Z., Barakat, H., Mannan, M., Youssef, A.: Towards a comprehensive analytical framework for smart toy privacy practices. In: Proceedings of the 7th Workshop on Socio-Technical Aspects in Security and Trust, p. 64, (2018)","DOI":"10.1145\/3167996.3168002"},{"key":"535_CR70","doi-asserted-by":"crossref","unstructured":"Strei, J., Kenny, O., Das, S., Leeth, A., Camp, L.J.: Who\u2019s watching your child? Exploring home security risks with smart toy bears, internet-of-things design and implementation (IoTDI). In: 2018 IEEE\/ACM 3rd International Conference on, p. 285, (2018)","DOI":"10.1109\/IoTDI.2018.00042"},{"key":"535_CR71","doi-asserted-by":"crossref","unstructured":"Williams, R., Machado, C.V., Druga, S., Breazeal, C., Maes, P.: My doll says it\u2019s ok: a study of children\u2019s conformity to a talking doll. In: Proceedings of the 17th ACM Conference on Interaction Design and Children, p. 625, (2018)","DOI":"10.1145\/3202185.3210788"},{"key":"535_CR72","doi-asserted-by":"crossref","unstructured":"Xia, L., Bisong, L., Qian, W., Ya, L.: Analysis of quality and safety of toys for children based on the survey data of Beijing. In: International Conference on Intelligent and Interactive Systems and Applications, p. 880, (2017)","DOI":"10.1007\/978-3-319-69096-4_125"},{"key":"535_CR73","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1016\/j.scs.2018.03.006","volume":"40","author":"M Fantinato","year":"2018","unstructured":"Fantinato, M., Hung, P.C.K., Jiang, Y., Roa, J., Villarreal, P., Melaisi, M., Amancio, F.: A preliminary study of \u2018Hello Barbie\u2019 in Brazil and Argentina. Sustain. Cities Soc. 40, 83\u201390 (2018)","journal-title":"Sustain. Cities Soc."},{"key":"535_CR74","doi-asserted-by":"crossref","unstructured":"Haynes, J., Ramirez, M., Hayajneh, T., Bhuiyan, M.Z.A.: A framework for preventing the exploitation of IoT: Smart Toys for Reconnaissance and Extraction. In: International Conference on Security, Privacy, and Anonymity in Computation, Communication, and Storage. p. 581, (2017)","DOI":"10.1007\/978-3-319-72395-2_53"},{"key":"535_CR75","doi-asserted-by":"crossref","unstructured":"Hung, P.C.K., Iqbal, F., Huang, S.C., Melaisi, M., Pang, K.: A glance of childs play privacy in smart toys. In: International Conference on Cloud Computing and Security, pp. 217\u2013231, (2016)","DOI":"10.1007\/978-3-319-48674-1_20"},{"key":"535_CR76","doi-asserted-by":"publisher","first-page":"2986","DOI":"10.1109\/JIOT.2018.2877749","volume":"6","author":"S Shasha","year":"2018","unstructured":"Shasha, S., Mahmoud, M., Mannan, M., Youssef, A.: Playing with danger: a taxonomy and evaluation of threats to smart toys. IEEE Internet Things J. 6, 2986\u20133002 (2018)","journal-title":"IEEE Internet Things J."},{"issue":"5","key":"535_CR77","doi-asserted-by":"publisher","first-page":"92","DOI":"10.1109\/MC.2018.2381121","volume":"51","author":"N Kshetri","year":"2018","unstructured":"Kshetri, N., Voas, J.: Cyber threats under the bed. Computer 51(5), 92\u201395 (2018)","journal-title":"Computer"},{"key":"535_CR78","unstructured":"de Carvalho, L.G., Eler, M.M.: Security tests for smart toys. In: ICEIS, p. 111, (2018)"},{"issue":"4","key":"535_CR79","doi-asserted-by":"publisher","first-page":"599","DOI":"10.1016\/j.clsr.2016.05.007","volume":"32","author":"V Verdoodt","year":"2016","unstructured":"Verdoodt, V., Lievens, E.: Toying with children\u2019s emotions, the new game in town? The legality of advergames in the EU. Comput. Law Secur. Rev. 32(4), 599\u2013614 (2016)","journal-title":"Comput. Law Secur. Rev."},{"key":"535_CR80","doi-asserted-by":"crossref","unstructured":"Ng, G., Chow, M., de Lima Salgado, A.: Toys and mobile applications: current trends and related privacy issues. In: Mobile Services for Toy Computing, p. 51, (2015)","DOI":"10.1007\/978-3-319-21323-1_4"},{"key":"535_CR81","unstructured":"Rapid7.: R7-2015-27 and R7-2015-24: Fisher-Price Smart Toy hereO GPS Platform Vulnerabilities (FIXED). (2016). https:\/\/blog.rapid7.com\/2016\/02\/02\/security-vulnerabilities-within-fisher-price\/-smart-toy-hereo-GPS-platform\/"},{"key":"535_CR82","unstructured":"BBC UK.: German parents told to destroy Cayla dolls over hacking fears. (2017). http:\/\/www.bbc.com\/news\/world-europe-39002142"},{"key":"535_CR83","unstructured":"Rapid7.: HACKING IoT: A case study on baby monitor exposures and vulnerabilities. (2015). https:\/\/www.rapid7.com\/docs\/Hacking-IoT-A-Case-Study-on-Baby-Monitor-\/Exposures-and-Vulnerabilities.pdf"},{"issue":"24","key":"535_CR84","first-page":"31","volume":"76","author":"A Hilts","year":"2016","unstructured":"Hilts, A., Parsons, C., Knockel, J.: Every step you fake: a comparative analysis of fitness tracker privacy and security. Open Effect Rep. 76(24), 31\u201333 (2016)","journal-title":"Open Effect Rep."},{"key":"535_CR85","unstructured":"Forbrukerra, D.: Investigation of privacy and security issues with smart toys. (2016). https:\/\/fil.forbrukerradet.no\/wp-content\/uploads\/2016\/12\/2016-11-technical- analysis-of-the-dolls-bouvet.pdf"},{"key":"535_CR86","unstructured":"VTech.: FAQ about Cyber attack on VTech learning lodge. (2016). https:\/\/www.vtech.com\/ en\/press_release\/2016\/faq-about-cyber-attack-on-VTech-learning-lodge\/"},{"key":"535_CR87","unstructured":"Pen Test Partners.: VTech Innotab Max vulnerable to trivial data extraction. (2015). https:\/\/www.pentestpartners.com\/security-blog\/vtech-innotab-max-vulnerable-to-trivial-data\/-extraction\/"},{"key":"535_CR88","unstructured":"Moini, C.: Mandated ethical hacking-a repackaged solution. Rich. JL Tech., vol. 23(3). (2017). http:\/\/jolt.richmond.edu\/volume23_annualsurvey_moini\/"},{"key":"535_CR89","unstructured":"Burns, E.: Is your IoT teddy bear safe? MondgoDB data breach allegedly leaks and ransoms millions of kid\u2019s voice recording. https:\/\/www.cbronline.com\/cybersecurity\/breaches\/iot-teddy-bear-safe-mondgodb-data-breach-leaks\/-ransoms-millions-kids-voice-recordings\/. Accessed 30 Jul 2019"},{"issue":"1","key":"535_CR90","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1109\/MTS.2016.2527078","volume":"35","author":"E Taylor","year":"2016","unstructured":"Taylor, E., Michael, K.: Smart toys that are the stuff of nightmares. IEEE Technol. Soc. Mag. 35(1), 8\u201310 (2016)","journal-title":"IEEE Technol. Soc. Mag."},{"key":"535_CR91","doi-asserted-by":"crossref","unstructured":"Denning, T., Matuszek, C., Koscher, K., Smith, J.R., Kohno, T.: A spotlight on security and privacy risks with future household robots: attacks and lessons. In: The ACM International Conference on Ubiquitous Computing, pp. 105\u2013114, (2009)","DOI":"10.1145\/1620545.1620564"},{"key":"535_CR92","unstructured":"Inc. Somerset Recon.: Hello Barbie initial security analysis. (2016)"},{"key":"535_CR93","unstructured":"United States Federal Bureau of Investigation. Public service announcement. (2017). https:\/\/www.ic3.gov\/media\/2017\/170717.aspx"},{"key":"535_CR94","unstructured":"Laughlin, A.: Which? Safety alert: See how easy it is for almost anyone to hack your child\u2019s connected toys. (2017). https:\/\/www.which.co.uk\/news\/2017\/11\/safety-alert-see-how-easy-it-is-for-almost-\/anyone-to-hack-your-child\u2019s-connected-toys\/"},{"key":"535_CR95","doi-asserted-by":"crossref","unstructured":"D\u2019Hooge, H.D.: Smart toys: brave new world? CHI \u201900 Extended Abstracts on Human Factors in Computing Systems, pp. 128\u2013126, (2000)","DOI":"10.1145\/633292.633436"},{"key":"535_CR96","doi-asserted-by":"crossref","unstructured":"Jones, M.L., Meurer, K.: Can (and should) Hello Barbie keep a secret? IEEE International Symposium on Ethics in Engineering, Science and Technology (ETHICS), Vancouver, BC, pp. 1\u20136, (2016). https:\/\/doi.org\/10.1109\/ETHICS.2016.7560047","DOI":"10.1109\/ETHICS.2016.7560047"},{"issue":"1","key":"535_CR97","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1109\/mic.2014.44","volume":"19","author":"S Han","year":"2015","unstructured":"Han, S., Park, S., Lee, G., Crespi, N.: Extending the devices profile for web services standard using a REST proxy. IEEE Internet Comput. 19(1), 10\u201317 (2015). https:\/\/doi.org\/10.1109\/mic.2014.44","journal-title":"IEEE Internet Comput."},{"key":"535_CR98","unstructured":"Yankson, B.: An Empirical study\u2014privacy and security analysis of companion robot system development. In: Proceedings of the 16th International Conference on Cyber Warfare and Security, Tennessee Tech University, Cookeville, Tennessee, (2021)"},{"issue":"1","key":"535_CR99","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1287\/isre.1060.0080","volume":"17","author":"T Dinev","year":"2006","unstructured":"Dinev, T., Hart, P.: An extended privacy calculus model for e-commerce transactions. Inf. Syst. Res. 17(1), 61\u201380 (2006)","journal-title":"Inf. Syst. Res."},{"issue":"1","key":"535_CR100","first-page":"19","volume":"7","author":"AD Rensel","year":"2006","unstructured":"Rensel, A.D., Abbas, J.M., Rao, H.R.: Private transactions in public places: an exploration of the impact of the computer environment on public transactional web siteuse. J. Assoc. Inf. Syst. 7(1), 19\u201351 (2006)","journal-title":"J. Assoc. Inf. Syst."},{"key":"535_CR101","doi-asserted-by":"publisher","first-page":"471","DOI":"10.1016\/j.dss.2012.06.010","volume":"54","author":"Y Li","year":"2019","unstructured":"Li, Y.: Theories in online information privacy research: a critical review and an integrated framework. Decis. Support Syst. 54, 471\u2013481 (2019)","journal-title":"Decis. Support Syst."},{"issue":"1","key":"535_CR102","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1287\/orsc.10.1.104","volume":"10","author":"MJ Culnan","year":"1999","unstructured":"Culnan, M.J., Armstrong, P.K.: Information privacy concerns, procedural fairness, and impersonal trust: an empirical investigation. Organ. Sci. 10(1), 104\u2013115 (1999)","journal-title":"Organ. Sci."},{"key":"535_CR103","doi-asserted-by":"publisher","first-page":"135","DOI":"10.2753\/MIS0742-1222260305","volume":"26","author":"H Xu","year":"2009","unstructured":"Xu, H., Teo, H.H., Tan, B.C.Y., Agarwal, R.: The role of push-pull technology in privacy calculus: the case of location-based services. J. Manag. Inf. Syst. 26, 135\u2013173 (2009)","journal-title":"J. Manag. Inf. Syst."},{"key":"535_CR104","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1016\/j.chb.2018.11.022","volume":"92","author":"D Kim","year":"2019","unstructured":"Kim, D., Park, K., Park, Y., Ahn, J.: Willingness to provide personal information: perspective of privacy calculus in IoT services. Comput. Hum. Behav. 92, 273\u2013281 (2019). https:\/\/doi.org\/10.1016\/j.chb.2018.11.022","journal-title":"Comput. Hum. Behav."},{"issue":"2","key":"535_CR105","first-page":"76","volume":"50","author":"E Bertlno","year":"2017","unstructured":"Bertlno, E., Islam, N.: Botnets and internet of things security. Cybertrust 50(2), 76\u201379 (2017)","journal-title":"Cybertrust"},{"key":"535_CR106","doi-asserted-by":"publisher","DOI":"10.1007\/s40309-016-0107-z","author":"R Tzezana","year":"2016","unstructured":"Tzezana, R.: Scenarios for crime and terrorist attacks using the internet of things. Eur. J. Futures Res. (2016). https:\/\/doi.org\/10.1007\/s40309-016-0107-z","journal-title":"Eur. J. Futures Res."},{"issue":"2\u20133","key":"535_CR107","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/s10799-005-5879-y","volume":"6","author":"RK Chellappa","year":"2005","unstructured":"Chellappa, R.K., Sin, R.G.: Personalization versus privacy: an empirical examination of the online consumer\u2019s dilemma. Inf. Technol. Manag. 6(2\u20133), 181\u2013202 (2005)","journal-title":"Inf. Technol. Manag."},{"key":"535_CR108","doi-asserted-by":"crossref","unstructured":"Kumar, S.A., Vealey, T., Srivastava, H.: Security in internet of things: challenges, solutions, and future directions. In: Proceedings of the 49th Hawaii International Conference on System Sciences, Koloa, HI, pp. 5772\u20135781, (2016)","DOI":"10.1109\/HICSS.2016.714"},{"issue":"4","key":"535_CR109","doi-asserted-by":"publisher","first-page":"989","DOI":"10.2307\/41409970","volume":"35","author":"JH Smith","year":"2011","unstructured":"Smith, J.H., Dinev, T., Xu, H.: Information privacy research: an interdisciplinary review. MIS Q. 35(4), 989\u20131016 (2011)","journal-title":"MIS Q."},{"key":"535_CR110","doi-asserted-by":"crossref","unstructured":"Nawir, M., Amir, A., Yaakob, N., Lynn, O.B.: Internet of Things (IoT): taxonomy of security attacks. In: 2016 3rd International Conference on Electronic Design (ICED), Phuket, Thailand, pp. 321\u2013 326, (2016)","DOI":"10.1109\/ICED.2016.7804660"},{"key":"535_CR111","unstructured":"Handbook of Dynamic System Modelling, Taylor and Francis Group. LLC, (2007)"},{"key":"535_CR112","unstructured":"Tague, R.N.: Plan-Do-Study-Act cycle. The quality toolbox (2nd ed.). Milwaukee: ASQ Quality Press, pp. 390\u2013392. ISBN 978-0873896399. OCLC 57129077. (2005)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00535-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-020-00535-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00535-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,19]],"date-time":"2021-10-19T03:15:46Z","timestamp":1634613346000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-020-00535-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,19]]},"references-count":112,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2021,12]]}},"alternative-id":["535"],"URL":"https:\/\/doi.org\/10.1007\/s10207-020-00535-2","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,19]]},"assertion":[{"value":"19 January 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"Author declares that he has no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"All procedures performed in studies involving human participants were in accordance with the ethical standards of the institutional and\/or national research committee and with the 1964 Helsinki declaration and its later amendments or comparable ethical standards.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical statement"}},{"value":"Informed consent was obtained from all individual participants included in the study.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed consent"}},{"value":"This article does not contain any studies with animals performed by any of the authors.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Human and animal rights"}}]}}